XAVi Technologies Corporation Tel: F, No. 129, Hsing Te Road, Sanchung City, Taipei Hsien 241, Taiwan

Transcription

1 XAVi Technologies Corporation Tel: F, No. 129, Hsing Te Road, Sanchung City, Taipei Hsien 241, Taiwan Copyright 2003, XAVi Technologies Corporation Information in this manual is subject to change without notice. No part of this manual may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying or scanning, for any purpose, without the written permission of XAVi Technologies Corporation. XAVi Technologies Corporation provides this documentation without warranty of any kind, implied or expressed, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. 1 / / 101

2 Table of Contents Chapter 1 Getting Started 1. OVERVIEW FEATURES APPEARANCE HARDWARE INSTALLATION MANAGEMENT DEFAULT VALUES SOFTWARE UPGRADE ETHERNET OVER ATM (EOA) IP OVER ATM (IPOA) BRIDGING BRIDGING ROUTING IP ROUTE SERVICES NAT RIP FIREWALL IP FILTER Chapter 2 Web Interface Management 1. OVERVIEW PREPARATION LOGIN HOME LAN LAN CONFIG DHCP MODE DHCP SERVER DHCP RELAY WAN DSL ATM VC POINT TO POINT PROTOCOL (PPP) / DOMAIN NAME SERVICE (DNS) BLOCKED PROTOCOLS ADMIN USER CONFIG COMMIT & REBOOT LOCAL IMAGE UPGRADE REMOTE IMAGE UPGRADE ALARM DIAGNOSTICS PORT SETTINGS SYSTEM LOG BACK/ RESTORE CONFIG MANAGEMENT CONTROL / 101

3 Chapter 3 Quick Protocol Setup 1. OVERVIEW RFC 1483 BRIDGE PPPOE ROUTE CONFIGURATION RFC NAT Revision Marks Revision Date Notes V 1.0 August 7, 2005 Software Version: 3.C5XAT1.8821/ c 5. PPPOA ROUTE CONFIGURATION IPOA ROUTE CONFIGURATION DHCP CONFIGURATION NAT CONFIGURATION APPENDIX A SPECIFICATIONS APPENDIX B WARRANTIES APPENDIX C REGULATIONS CONTACT INFORMATION / / 101

4 Chapter 1 1. Overview Getting Started X8821r and X8821r+ are ADSL/ADSL2+ series of customer premise equipments that provide high-speed asymmetrical data transmission on a single twisted copper pair. The DSL line interface supports various ADSL standards, up to ADSL2+ with X8821r+. At the DTE side these CPEs provide one 10/100 Ethernet interface for easy connection to user s PC or LAN environment. With built-in IP routing, NAPT and firewall, these units serve as the gateway to the Internet world. X8821r and X8821r+ deliver broadband access for enterprises, telecommuters, home, and remote office workers with high-speed data transfer requirements. 2. Features Compliant with ITU-T G (G.dmt), G (G.lite) and ANSI T1.413 Issue 2 X8821r+ is additionally compliant with ITU-T G (G.dmt.bis / ADSL2), G (ADSL2+) and provides up to 24 Mbps downstream rate Compatible and interoperable with major Central Office side ADSL DSLAM or Multi-service Access System One 10/100 Base-TX Ethernet port for PC / LAN connection RFC2684 / 1483 to bridge or route traffic over ATM over ADSL Support Networking protocols such as PPP, IP routing, NAPT, DHCP server / relay / client Can work either in Bridge or Router mode Support local and remote configuration and management through Web, Telnet or SNMP Simple firmware upgrade via TFTP, FTP or HTTP 7 / / 101

5 3. Packaging This package consists of the following items: X8821r ADSL device unit 4. Appearance Front Panel RJ-45 Cable RJ-11 Cable AC Adapter User s Manual CD Label LED Color Description Status 1 PWR ON Green Power supply is connected. 2 WAN Blinking Green Training with DSLAM. ON Green ADSL link is ready. 3 PPP ON Green PPP sync up Blinking Green Data transmitting 4 LAN ON Green Ethernet transmitting 5 ALM Blinking RED Booting up. ON RED Error. 9 / / 101

6 Rear Panel 5. Hardware Installation 1. Connect one end of the ADSL cable to the WAN port of X8821r and the other end to the ADSL wall outlet. 2. Use a RJ-45 cable to connect one end to the Ethernet port of X8821r, and the other end to the LAN or a PC with an Ethernet adapter installed Plug in the AC adapter to the AC power socket, and then connect the DC jack to the PWR inlet of X8821r. Label Description 1 WAN RJ-11 or RJ-45 port; connect to the ADSL outlet. 2 X8821r uses RJ-11 Cable. RESET Reset the modem back to factory settings by holding down on this button. 3 ETHERNET RJ-45 port; connect to a PC or LAN. 4 PWR Power jack; connect to a power adapter. 1 ADSL Outlet 2 PC 3 Power Supply Note: Be sure to use a RJ-45 crossover cable while connecting to a hub. 11 / / 101

7 6. Management The device supports simple, flexible, and easy-to-operate methods for management purposes. X8821r can be managed via the following paths: Local Ethernet Port (Telnet) connect the Ethernet port to your local area network or directly to a PC. Telnet X8821r from any workstation in the LAN. The default local Ethernet IP address is Local Ethernet Port (Web Browser) connect the Ethernet port to your local area network or directly to a PC. Launch your web browser and enter default local Ethernet IP address into the address bar. ADSL Port from Remote Site while the ADSL connection is in service, you may remotely Telnet X8821r from a workstation connected to the CO equipment. 7. Default Values This device is pre-configured with the following parameters; you may also re-load the default parameters by rebooting the router into the Default configuration from the web browser. Default Mode: Bridge Login Name: admin Password: admin Bridge Mode Setting WAN and ADSL Ethernet (local) IP: Local Line Code: Auto Subnet Mask: Trellis Mode: Enable Full Duplex: Auto FDM Mode: EC Protocol: RFC1483, Bridge Mode Coding Gain: Auto VPI/VCI: 8/35 Transmit Power Attenuation: 0dB Class (QoS): UBR Spanning Tree: Disable Packet Filter: Any Router Mode Setting Ethernet (local) IP: Subnet Mask: DHCP Server: Disable DNS Relay: Disable Note: As operating an ADSL device requires technical know-how and experience. It is recommended that only qualified technical staffs manage the device. Therefore, a password authentication is required when you enter the web interface. To obtain the password, see the Default Values section. Note: The User Name and Password are case-sensitive. 13 / / 101

8 8. Software Upgrade You may easily upgrade the embedded software by obtaining the compressed upgrade kit from the service provider then following the steps: Chapter 2 Web Interface Management Click on the Local Image Upgrade link to upgrade the software on the modem. You may easily upgrade the embedded software by obtaining the compressed upgrade kit from the service provider and then following the steps: a. Click on the Browse button to select the upgrade file. b. Click on the Upload button to upload the file into the modem c. This process may last as long as 60 seconds. 1. Overview The Web management is provided in order to manage the ADSL device as easily as possible. It provides a very user-friendly configuration and graphical interface through a Web based platform. You can configure a bridge or a router, as you feel appropriate. In the section below, each configuration item is described in detail. 2. Preparation 1) Please refer the hardware installation procedure to install modem. 2) You should configure the PC to the same IP subnet as the modem. For example: The modem: Your PC: x 3) Let your PC access the modem, and make sure that the PING function is working properly. The default IP address of this modem could be found in the default settings section. 4) Open the Web browser (Internet explorer or Netscape), enter the default IP address for the website address to access the web management page. 5) The Login dialog box will pop up first. Note: Strictly maintain stable power to the device while upgrading its software. If the power fails during the upgrading process, contents in the memory could be destroyed, and the system may hang. In such a case, you must call the dealer or system integrator for repairs. 15 / / 101

9 3. Login The window Enter Network Password will pop up while starting the configuration. With the window open, type admin for both the Username and the Password. 4. HOME After logging in, the first tab that will be displayed is the Home tab. Under this tab, the System View page is displayed. This page displays a summary of the interfaces and their settings. After you log into the web interface, you will notice that it is divided into seven different sections, or tabs. From this point on, each tab is described in detail along with instructions for configuration. The seven tabs are: Home, LAN, WAN, Bridging, Routing, Services, and Admin. This page is divided into five sections. The table below describes each section. 17 / 101 Section Name Device DSL Description Displays model name, hardware/software version, device mode, uptime, current time, time zone, daylight savings time, and domain name. Displays operation status, last state, DSL version, and DSL standard. 18 / 101

10 WAN Interfaces LAN Interface Services Summary Displays the WAN interface name, encapsulation type, IP address, subnet mask, lower interface, VPI/VCI values, and operational status. Displays the LAN interface name, MAC address, IP address, subnet mask, lower interface, transmission speed, duplex type and operational status. Displays the interface name, and enabled/disabled features, such as: NAT, IP filter, RIP, DHCP relay, DHCP client, DHCP server, and IGMP. A green check mark ( ) indicates that the service has been enabled. A red cross ( ) indicates the service has been disabled. However, you must enter the domain name, which is the SNTP address. Date: Enable this check box and select the date from the drop-down list. Time: Enable this check box and select the time from the drop-down list. Daylight Saving Time: Select ON or OFF as necessary. Name: Enter the name of the SNTP server. Domain Name: Enter the domain name or IP address of the SNTP server. Click on the Submit button when completed and make sure to Commit & Reboot. 5. LAN To add, change, or remove any of the interface settings, click on the interface name. Click on the Modify button to set the device date, time, time zone, and other related settings. Click on the Submit button when completed. Click on the LAN tab to view its sub-menu s and configure the LAN settings. The four sub-menu s are: LAN Config, DHCP Mode, DHCP Server, and DHCP Relay. Each sub-menu is described below. 5.1 LAN Config Click on the LAN Config link to change the LAN IP address/ subnet mask of the Ethernet and USB interface, decide where the LAN is getting its IP address from, and enable or disable IGMP. If you are using the ADSL/Ethernet router with multiple PCs on your LAN, you must connect the LAN via an Ethernet hub connected to the device's LAN port. If you are using a single PC with the ADSL/Ethernet router, you have two connection options: SNTP: Select Enable if you would like the time to be assigned by an SNTP server. By selecting this option you will not be required to enter the time, date, or time zone. 19 / 101 You can connect the PC directly to the LAN port using a cross-over Ethernet cable. 20 / 101

11 If the PC is USB-enabled, you can connect it directly to the device's USB port. Only one computer can be connected in this manner. You can also use the USB and Ethernet interfaces simultaneously, connecting your LAN to the Ethernet port and a standalone PC to the USB port. Follow the steps below in order to set up the LAN. ADSL/Ethernet router collects and consolidates requests from the LAN PCs to receive IGMP messages from external computers. The interface also forwards IGMP messages it receives on its WAN interface to the appropriate hosts. The WAN interface must also be enabled for the IGMP protocol Depending on your ISP s settings, choose to enable or disable IGMP. MTU: The Maximum Transmission Unit specifies the size in bytes of the largest Ethernet packet that the interface will accept. Packets larger than this size will be dropped. Click on the Submit button when completed and make sure to Commit & Reboot. 5.2 DHCP Mode Click on the DHCP Mode link to select a DHCP setting. From the drop down list, select DHCP Server, DHCP Relay, or None and click on the Submit button. DHCP is a protocol that enables network administrators to centrally manage the assignment and distribution of IP information to computers on a network. Get LAN Address: Select Manual if you would like to enter your own IP address. Select External DHCP Server if a DHCP server other than this device assigns the IP addresses. Select Internal DHCP Server if you would like this device to assign the IP addresses. LAN IP Address: Enter the LAN IP address into these text boxes. This is the IP address for the Ethernet port. LAN Network Mask: Enter the subnet mask of the LAN IP address into these text boxes. This is the subnet mask for the Ethernet port. IGMP: Indicates whether this interface is enabled with the Internet Group Management Protocol. When enabled, the 21 / 101 When you enable DHCP on a network, you allow a device - such as your ADSL/Ethernet router or a router located with your ISP - to assign temporary IP addresses to your computers whenever they connect to your network. The assigning device is called a DHCP server, and the receiving device is a DHCP client. 22 / 101

12 5.3 DHCP Server Click on the DHCP Server link to view the DHCP Server settings. The table displays the DHCP server settings, this includes: start IP, end IP, domain name, gateway address, and status. Click on the Add button to enable a DHCP server and fill in the IP information based on your ISP settings. An IP address pool typically includes a range private addresses that you define. LAN administrators often define private IP addresses for use only on their networks. You can also use DHCP server pools to distribute multiple public IP addresses, if, for example, these are to be shared among a larger set of LAN computers. You can create up to two DHCP server address pools. You can define a single pool with addresses that can be assigned to your LAN PCs (connected via the Ethernet port) and to a USB-connected computer, as long you have assigned to the USB and Ethernet interfaces static IP addresses that place them in the same subnet. Start/End IP Addresses: Specify the lowest and highest addresses in the pool, up to a maximum range of 254 addresses. Mac Address: A MAC address is a manufacturer-assigned hardware ID that is unique for each device on a network. Use this field only if you want to assign a specific IP address to a specific computer (that is, you are creating an exception to the dynamic assignment of addresses). The IP address you specify will be assigned to the computer that corresponds to this MAC address. If you type a MAC address here, you must have specified the same IP address in both the Start IP Address and End IP Address fields. Net Mask: Specifies which portion of each IP addresses in this range refers to the network and which portion refers to the host (computer). You can use the net mask to distinguish which pool of addresses should be distributed to a particular subset of computers on your LAN (call a subnet). Domain Name: A user-friendly name that refers to the subnet that includes the addresses in this pool. Gateway Address: The address of the default gateway for computers that receive IP addresses from this pool. If no value is specified, then the appropriate LAN (eth-0) or USB (usb-0) port address on the device will be distributed to each PC as its gateway address, depending on how each 23 / / 101

13 is connected. See Configuring IP Routes for an explanation of gateway addresses. DNS/SDNS: The IP address of the Domain Name System server to be used by computers that receive IP addresses from this pool. The DNS translates common Internet names that you type into your web browser into their equivalent numeric IP addresses. Typically, this server is located with your ISP. SMTP...SWINS (optional): The IP addresses of devices that perform various services for computers that receive IP addresses from this pool (such as the SMTP, or Simple Mail Transfer Protocol, server which handles traffic). Contact your ISP for these addresses. Click on the Submit button when completed and make sure to Commit & Reboot. 5.4 DHCP Relay Click on the DHCP Relay link to view the DHCP Relay settings. Some ISPs perform the DHCP server function for their customers' home/small office networks. In this case, you can configure the device as a DHCP relay agent. When a computer on your network requests Internet access, the ADSL/Ethernet router connects your ISP to obtain an IP address and other information, and then forwards that information to the computer. Fill in the DHCP server IP address in the text boxes and select an interface name from the dorp down list, then click on the Add button. 6. WAN Click on the WAN tab to view its sub-menu s and configure the WAN settings. The five sub-menu s are: DSL, ATM VC, PPP, EOA, and IPOA. Each sub-menu is described below. 6.1 DSL The DSL Status page displays current information on the DSL line performance. The page refreshes according to the setting in the Refresh Rate drop-down list, which you can configure. In the DSL Status table, the Operational Status setting displays a red, orange, or green ball to indicate that the DSL line is idle, starting up, or up-and-running, respectively. You can click Loop Stop to end the DSL connection. To restart the connection, you can click Loop Start. Although you generally will not need to view the remaining parameters, they may be helpful when troubleshooting connection or performance problems with your ISP. Click on the DSL link to view the DSL status. Click on the DSL Param button to view the DSL parameters and the Stats button to view the DSL statistics. Both the DSL Parameters and DSL Statistics are described below. Click on the Clear button to clear and refresh the DSL status. You may also change the page refresh rate by selecting a different time period from the Refresh Rate drop down list. 25 / / 101

14 a) DSL Parameters Click on the DSL Param button to view the DSL parameters. Another window will then display the DSL parameters, which may be different due to the type and speed of the network. Click on the Close button to close the window, or click on the Refresh button to refresh the status. b) DSL Stats Click on the Stats button to view the DSL status. Another window will then display the DSL status, which may be different due to the type and speed of the network. Click on the Close button to close the window, or click on the Refresh button to refresh the status. 6.2 ATM VC Click on the ATM VC link to view the ATM VC table. This table displays the interface name, VPI/VCI values, Mux type, and maximum protocols per AAL5. 27 / / 101

15 Click on the trash can icon to delete the current interface, or edit the current interface by clicking on the pencil icon. Click on the Add button to another interface. The devices WAN-side interfaces are used to communication via the DSL port. A WAN interface comprises two layers: a lower-level ATM VC interface and a higher-level protocol interface: The ATM VC interface enables the device to communicate using the Asynchronous Transfer Mode protocol. The ATM protocol provides a common format for transmitting data over a variety of hardware systems that make up the backbone of the Internet. The virtual circuit (VC) properties of the ATM VC interface identify a unique path that your ADSL/Ethernet router uses to communicate via the ATM-based network with the telephone company central office equipment. The higher-level protocol interface(s) operate "on top" of the ATM VC interface. The higher-level interface handles the protocols needed to log onto and exchange data with the ISP's access server. ISPs can use several different protocols, including the Point-to-Point Protocol (PPP), Ethernet-over-ATM (EoA) protocol, or the Internet Protocol-over-ATM (IPoA). Be sure to create the specific type of WAN interface your ISP requires. After you have defined the ATM VC properties as described in this topic, you can configure one of the higher level WAN interfaces to enable communication with your ISP. After you click on the Add button, another window will appear. VC Interface: The name of the lower-level interface on which this VC operates. The low-level interface names are preconfigured in the software and identify the type of traffic that can be supported, such as data or voice. Internet data services typically use an AAL5-type interface. VPI, VCI, and Mux Type: These settings identify a unique ATM data path for communication between your ADSL/Ethernet router and your ISP. Max Proto per AAL5: If you are using an AAL5-type of interface, this setting indicates the number of higher level interfaces that the VC can support (the higher level interfaces can be PPP, EoA, or IPoA interfaces). Contact your ISP to determine which connection protocol(s) they require. Click on the Submit button when completed and make sure to Commit & Reboot. 6.3 Point to Point Protocol (PPP) Click on the PPP link to view the PPP configuration table. This table displays PPP information such as: interface name, interface type, protocol, WAN IP, gateway IP, default route, DHCP, DNS, and operation status. 29 / / 101

16 Click on the trash can icon to delete the current interface, or edit the current interface by clicking on the pencil icon. Click on the Add button to another interface. The Point-to-Point Protocol (PPP) is one of several protocols used to enable communication between ISPs and their customers. PPP performs tasks such as the following: Identifying the type of service the ISP provides to a given customer Identifying the customer to the ISP through a username and password login Enabling the ISP to assign Internet information to the customer's computers PPP can be used only when your connection with your ISP is a routed connection, not with a bridged connection. After you click on the Add button, another window will appear. PPP Interface: The predefined name of the PPP interface. ATM VC: The Virtual Circuit over which this PPP data is sent. The VC identifies the physical path the data takes to reach your ISP. See Configuring the ATM VC for more information. Interface Sec Type: The type of Firewall protections that are in effect on the interface (public, private, or DMZ): A public interface connects to the Internet (PPP interfaces are typically public). Packets received on a public interface are 31 / / 101

17 subject to the most restrictive set of firewall protections defined in the software. A private interface connects to your LAN, such as the Ethernet interface. Packets received on a private interface are subject to a less restrictive set of protections, because they originate within the network. The term DMZ (de-militarized zone), in Internet networking terms, refers to computers that are available for both public and in-network accesses (such as a company's public Web server). Packets incoming on a DMZ interface -- whether from a LAN or external source -- are subject to a set of protections that is in between public and private interfaces in terms of restrictiveness. Protocol: The type of PPP protocol used. Your ISP may use PPP-over-Ethernet (PPPoE) or PPP-over-ATM (PPPoA). Default Route: Indicates whether the ADSL/Ethernet router should use the IP address assigned to this connection as its default route. Can be Enabled or Disabled. See Configuring IP Routes for an explanation of default routes. MTU: The Maximum Transmission Unit specifies the size in bytes of the largest Ethernet packet that the interface will accept. Packets larger than this size will be dropped. Use DHCP: When set to Enable, the device will acquire additional IP information from the ISP's DHCP server. The PPP connection itself acquires the device's IP address, mask, DNS address, and default gateway address. With Use DHCP enabled, the device will acquire IP addresses for various other server types (WINS, SMTP, POP3, etc. -- these server types are listed on the DHCP Server Configuration page). Use DNS: When set to Enable, the DNS address learned through the PPP connection will be distributed to clients of the device's DHCP server. This option is useful only when the ADSL/Ethernet Router is configured to act as a DHCP server for your LAN. Security Protocol: Select a security protocol and then enter the user name and password. Click on the Submit button when completed and make sure to Commit & Reboot. 6.4 Ethernet over ATM (EoA) Click on the EOA link to view the RFC1483/EoA configuration table. This table displays EoA information such as: interface name, interface security type, lower interface, config IP, network IP, DHCP, default route, gateway IP, and status. Click on the trash can icon to delete the current interface, or edit the current interface by clicking on the pencil icon. Click on the Add button to add another interface. The Ethernet-over-ATM (EoA) protocol is commonly used to carry data between local area networks that use the Ethernet protocol and wide-area networks that use the ATM protocol. Many telecommunications industry networks use the ATM protocol. ISPs who provide DSL services often use the EoA protocol for data transfer with their customers' DSL modems. EoA can be implemented to provide a bridged connection between a DSL modem and the ISP. In a bridged connection, data is shared between the ISP's network and their customer's as if the networks were on the same physical LAN. Bridged connections do not use the IP protocol. EoA can also be configured to provide a routed connection with the ISP, which uses the IP protocol to exchange data. 33 / / 101

18 After you click on the Add button, another window will appear. EOA Interface: The name the software uses to identify the EoA interface. Interface Sec Type: The type of security protections in effect on the interface (public, private, or DMZ): A public interface connects to the Internet (IPoA interfaces are typically public). Packets received on a public interface are subject to the most restrictive set of firewall protections defined in the software.a private interface connects to your LAN, such as the Ethernet interface. Packets received on a private interface are subject to a less restrictive set of protections, because they originate within the network. The term DMZ (de-militarized zone), in Internet networking terms, refers to computers that are available for both public and in-network accesses (such as a company's public Web server). Packets incoming on a DMZ interface -- whether from a LAN or external source -- are subject to a level of protection that is in between those for public and private interfaces. Lower interface: EoA interfaces are defined in software, and then associated with lower-level software and hardware structures (at the lowest level, they are associated with a physical port - the WAN port). This field should reflect an interface name defined in the next lower level of software over which the EoA interface will operate. This will be an ATM VC interface, such as aal5-0, as described in Configuring the ATM VC. Config IP Address and Net Mask: The IP address and network mask you want to assign to the interface. If the interface will be used for bridging with your ISP and you will not be using the device as a router on your LAN, then you do not need to specify IP information. If you enable DHCP for this interface, then the Configured IP address will serve only as a request to the DHCP server. The actual address that is assigned by the ISP may differ if this address is not available. Use DHCP: When enabled, this setting instructs the device to accept IP information assigned dynamically by your ISP's DHCP server. If the interface will be used for bridging with your ISP and you will not be routing data through it, leave this checkbox unselected. Default Route: Indicates whether the ADSL/Ethernet router should use the IP address assigned to this interface, if any, as its default route for your LAN. This can be Enable or Disable. See Configuring IP Routes for an explanation of default routes. Gateway Address: The external IP address that the ADSL/Ethernet router communicates with via the EoA interface to gain access to the Internet. This is typically an ISP server. Click on the Submit button when completed and make sure to Commit & Reboot. 35 / / 101

19 6.5 IP over ATM (IPoA) Click on the IPoA link to view the IP over ATM configuration table. This table displays IPoA information such as: interface name, interface security type, lower interface, config IP, network IP, subnet mask gateway IP, and status. Click on the trash can icon to delete the current interface, or edit the current interface by clicking on the pencil icon. Click on the Add button to add another interface. An IPoA interface can be used to exchange IP packets over the ATM network, without using an underlying Ethernet over ATM (EOA) connection. Typically, this type of interface is used only in product development environments, to eliminate unneeded variables when testing IP layer processing. After you click on the Add button, another window will appear. 37 / 101 IPoA Interface: The name the software uses to identify the IPoA interface Config IP Address and Net Mask: The IP address and network mask you want to assign to the interface. If the interface will be used for bridging with your ISP and you will not be using the device as a router on your LAN, then you do not need to specify IP information. If you enable DHCP for this interface, then the Configured IP address will serve only as a request to the DHCP server. The actual address that is assigned by the ISP may differ if this address is not available. Interface Security Type: The type of firewall protections that are in effect on the interface (public, private, or DMZ): A public interface connects to the Internet (IPoA interfaces are typically public). Packets received on a public interface are subject to the most restrictive set of firewall protections defined in the software. A private interface connects to your LAN, such as the Ethernet interface. Packets received on a private interface are subject to a less restrictive set of protections, because they originate within the network. The term DMZ (de-militarized zone), in Internet networking terms, refers to computers that are available for both public 38 / 101

20 and in-network accesses (such as a company's public Web server). Packets incoming on a DMZ interface -- whether from a LAN or external source -- are subject to a level of protection that is in between public and private interfaces in terms of restrictiveness. RFC 1577: Specifies whether the IPoA protocol to be used complies with the IEFT specification named "RFC Classical IP and ARP over ATM" (contact your ISP if unsure). Lower interface: An IPoA interface must be associated with one or more ATM VCs that have been defined on the system. The ATM VC is also considered an interface--one that performs "lower level" functions (i.e., closer to hardware) than the IPoA interface. See Configuring the ATM VC for information about ATM VC interfaces. Gateway Address: The external IP address that the ADSL/Ethernet router communicates with via the IPoA interface to gain access to the Internet. This is typically an ISP server. Click on the Submit button when completed and make sure to Commit & Reboot. 7 Bridging Click on the Bridging tab to view its sub-menu s and configure the bridge settings. The six sub-menu s are: Bridging, LAN Config, DSL, ATM VC, and RFC 1483 Interface (EoA). The bridging sub-menu is described below. (Each of the other sub-menus is described in the earlier sections.) 7.1 Bridging Click on the Bridging link to view the Bridge configuration. This table displays bridge information such as: interface name. Click on the trash can icon to delete the current interface, or edit the current interface by clicking on the pencil icon. There are three radio buttons on this page. In order to use bridging, you must enable Bridging and WAN to WAN Bridging. 39 / / 101